[Clamav-users] Re: submit-to-publish time much too long for phishing

2006-11-30 Thread G.W. Haywood
Hi there, On Thu, 30 Nov 2006 Dennis Peterson wrote: I do. I use a milter (J-Chkmail) that provides several layers of anti-spam management Do you use this for commercial purposes? 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit

[Clamav-users] Re: Chronic MD5 Verification Errors

2006-12-12 Thread G.W. Haywood
Hi there, On Tue, 12 Dec 2006 Edward Dam wrote: Intermittently, freshclam would die with an MD5 verification error Does this very recent thread help at all? Error (Cannot connect to 'localhost:3310': IO::Socket::INET: connect: Connection refused ) -- 73, Ged.

[Clamav-users] Re: Chronic MD5 Verification Errors

2006-12-13 Thread G.W. Haywood
Hi there, On Tue-Wed, 12-13 Dec 2006 Edward Dam wrote: Intermittently, freshclam would die with an MD5 verification error Does this very recent thread help at all? Error (Cannot connect to 'localhost:3310': IO::Socket::INET: connect:... It's similar, but not quite the same, in that

[Clamav-users] Re: Newbie-inquiry

2006-12-19 Thread G.W. Haywood
Hi there, On Tue, 19 Dec 2006 Walter B?rger wrote: I tried clamav 0.90rc2 and the scantime of clamav minimized to 30-50 seconds. If I understand this, you have found that ClamAV 0.90rc2 is ten or twenty times faster than the previous version of ClamAV that you were using. Please would you

[Clamav-users] Freshclam stability as a daemon [was: DB Update email before actual update available?]

2006-12-29 Thread G.W. Haywood
Hi there, Some time ago somebody wrote, and somebody else replied: Why not just run freshclam as a daemon? Then you really need to have a daemon watcher to keep it going. Talk of freshclam dying gives me some discomfort, yet in almost two years running freshclam as a daemon on two - not

[Clamav-users] Re: Freshclam stability as a daemon [was: DB Update email before actual update available?]

2006-12-30 Thread G.W. Haywood
Hi there, On Sat, 30 Dec 2006 Stephen Gran wrote: I have seen freshclam fail several times when run as a daemon, but all in exactly the same way - stuck in a read() on a network socket. This problem has been fixed for some time, and I have not seen another failure since the fix went in.

[Clamav-users] Re: clamav auto scan Linux system

2007-01-13 Thread G.W. Haywood
Hi there, On Sat, 13 Jan 2007 Wilson Kwok wrote: Can Clamav auto scan the Linux system directory, and then after scan can send the results to email such as root, how can I do that ? Do you have a reason for doing this in this way? If it's just to check for changed system files you'd be far

[Clamav-users] Re: Freshclam daemon dies during update process

2007-02-08 Thread G.W. Haywood
Hi there, On Thu, 8 Feb 2007 Rolf E. Sonneveld wrote: Did you get any response on this issue on the development list? The problem still occurs now and then (occassionally, once every two or three weeks, without a pattern). Today I came in the office and found freshclam had died again.

Re: [Clamav-users] unreponsive under solaris - 0.90.2

2007-05-16 Thread G.W. Haywood
Hi there, On Wed, 16 May 2007 Dennis Peterson wrote: ... I also don't scan (or accept) most file formats declared unsafe by Microsoft. How do you determine this? -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit

Re: [Clamav-users] unreponsive under solaris - 0.90.2

2007-05-17 Thread G.W. Haywood
Hello again, On Wed, 17 May 2007 Dennis Peterson wrote: ... I also don't scan (or accept) most file formats declared unsafe by Microsoft. How do you determine this? From Microsoft's web page: http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631 Um, aren't they just file

Re: [Clamav-users] Problems with installation

2007-08-03 Thread G.W. Haywood
Hi there, On Fri, 3 Aug 2007 SM wrote: Visa and Mastercard are insisting that I put a virus scanner on the server, and this is the only one I can find. They also insist that any upgrades have to go through a long process, which would probably take a month on the OS, and if I don't get this

Re: [Clamav-users] clamscan crashes server

2007-08-11 Thread G.W. Haywood
Hi there, On Sat, 11 Aug 2007 Marshall Dudley wrote: ...clamscan created a huge number of files like mixedtextportion05GJ4k in the /tmp/clamav-ec6d3e4e4e253eaf directory and filled it up ... when I tried to do a rm * it reported that the file list was too long, so I had to delete them a few

Re: [Clamav-users] memory leak in clamd (0.91.1)?

2007-08-13 Thread G.W. Haywood
Hi there, On Mon, 13 Aug 2007 Tomasz Chmielewski wrote: Re: memory leak in clamd (0.91.1)? Does clamd (0.91.1) have a memory leak of some sort? I use sendmail and clamav-milter, and I see something rather strange with 0.91.1. I haven't usesd versions between those, I moved from 0.88.7

Re: [Clamav-users] can clamav kill Win32 PE virus?

2007-09-02 Thread G.W. Haywood
Hi there, The answer to the question in the subject line is No, please read the FAQ at http://www.clamav.org/support/faq/; but read on... On Sun, 2 Sep 2007 [EMAIL PROTECTED] wrote: I am a Fedora 7 user running ClamAV to protect my data on my PC (though they're extremely rare). However

Re: [Clamav-users] 0.91 - high load under solaris

2007-09-07 Thread G.W. Haywood
Hi there, On Fri, 7 Sep 2007 Henrik Krohns wrote: On Thu, Sep 06, 2007 at 02:29:23PM +0100, Ian G Batten wrote: On 3 Sep 2007, at 17:02, Henrik Krohns wrote: I wonder if it could be fixed by just compiling with (posix)PCRE instead? That looks promising. I've compiled a test

Re: [Clamav-users] MBL?

2007-09-12 Thread G.W. Haywood
Hi there, On Wed, 12 Sep 2007 Dennis Peterson wrote: ... today I got my first FP using that file so deleted it. I've never gotten a FP using the VX db, but then I've never gotten a hit with it either. Meanwhile, Sane Security keeps knocking them down. Just wondering - are ClamAV databases

Re: [Clamav-users] Missing Freshclam after upgrade to clamav-0.90.3-1.fc7

2007-09-16 Thread G.W. Haywood
Hi there, On Sun, 16 Sep 2007 Stephen Gran wrote: The simplest approach to making the work would be to dedicate a directory to keeping the source lying around, and then keep a file somewhere outside of that source tree with the ./configure flags. That way, you can easily uninstall or rerun

Re: [Clamav-users] winclamav updates from linux clamav

2007-10-06 Thread G.W. Haywood
Hi there, On Sat, 6 Oct 2007 ilias seperis wrote: I've read the FAQ. Obviously I didn't explain my case so well. I have the following setup: headquarters linux server - satellite communication (very expensive) - remote linux server - windows clients I wonder if some of the design decisions

Re: [Clamav-users] clamav-users Digest, Vol 36, Issue 16

2007-10-11 Thread G.W. Haywood
___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamav-users Digest, Vol 38, Issue 3

2007-11-05 Thread G.W. Haywood
HI folks, This came through from the Debian security list, I thought those of you using PCRE with ClamAV might want to take a look. [snip] November 5th, 2007http://www.debian.org/security/faq - Package

[Clamav-users] PCRE vulnerabilities.

2007-11-05 Thread G.W. Haywood
Oh, bother, I'll try that again with a subject line... Hi folks, This came through from the Debian security list, I thought those of you using PCRE with ClamAV might want to take a look. [snip] November 5th, 2007http://www.debian.org/security/faq -

Re: [Clamav-users] Accurate subjects (was Re: PhishingScanURLs is dreadfully slow/CPU-intensive)

2007-11-13 Thread G.W. Haywood
Hi there, On Monday November 12, 2007 at 04:22:47 (PM) David F. Skoll wrote: Really? All posters on this thread who gave an opinion wanted PhishingScanURLs off by default. I invite users who want PhishingScanURLs to be on by default to come forward; I'll happily go with the majority

Re: [Clamav-users] Clamav best practices: VMware Server

2007-11-19 Thread G.W. Haywood
Hi there, On Mon, 19 Nov 2007 Ian G Batten wrote: On 18 Nov 07, at 0614, Dennis Peterson wrote: Have you considered scannning only files that have changed (md5sum difference, for example) since the last time they were scanned? There's no need to scan a file endlessly - only if it has

Re: [Clamav-users] ClamAV Vulnerability

2007-11-21 Thread G.W. Haywood
Hi there, On Tue, 13 Nov 2007 David F. Skoll wrote: ...I think on-by-default code that is inefficient, badly-written, a source of false-positives and of dubious value in a virus-scanner is pretty important to discuss. and on Wed, 21 Nov 2007 David F. Skoll wrote: Clam has a rather

[Clamav-users] Unreliable mirror.

2007-12-01 Thread G.W. Haywood
Hi there, My freshclam logs say that the mirror in Oxford, England has failed to supply ClamAV database updates since about November 6th. According to http://www.clamav.net/mirrors.html the database is about 9.6 days old as I write, but the problem goes back far longer than that. See for

Re: [Clamav-users] Unreliable mirror.

2007-12-03 Thread G.W. Haywood
Hi Luca, On Mon, 3 Dec 2007 Luca Gibelli wrote: Hello G.W., :) My freshclam logs say that the mirror in Oxford, England has failed to supply ClamAV database updates since about November 6th. According to that's not true. Forgive me for insisting, but what I wrote is true. That is, I

Re: [Clamav-users] compile from source error at make - __xpg_strerror_r

2007-12-04 Thread G.W. Haywood
Hi there, On Tue, 4 Dec 2007 Petar wrote: [if this is the wrong list please advise - I'm a new subscriber] It's the right list. I hope someone has been across this error whilst compiling from source on linux machine. /root/clamav-0.92rc2/clamd/server-th.c:558: undefined reference to

[Clamav-users] Mirror out of date?

2007-12-06 Thread G.W. Haywood
Hi there, Has anyone seen a problem with the Sanesecurity databases dotsrc mirror? [EMAIL PROTECTED] ged]# date Thu Dec 6 14:02:12 GMT 2007 [EMAIL PROTECTED] ged]# wget http://mirrors.dotsrc.org/clamav-sanesigs/phish.ndb.gz ... [EMAIL PROTECTED] ged]# wget

Re: [Clamav-users] Clamd memory use

2007-12-12 Thread G.W. Haywood
Hi there, On Wed, 12 Dec 2007 Henrik Krohns wrote: On Tue, Dec 11, 2007 at 09:19:45PM -0800, Dennis Peterson wrote: The messages/hour is not a parameter one typically controls. Systems I build are build to handle estimated worst case loads. Maybe you can't control it, but if

[Clamav-users] Documentation patch.

2007-12-13 Thread G.W. Haywood
Hi there, The clamav-milter manpage says -Q, --quarantine=EMAILADDRESS If this e-mail address is given, messages containing a virus or worm are redirected to it. However it doesn't say that if you use this option then infected mail will be accepted rather than rejected. I don't see why it

Re: [Clamav-users] How to gewt rid of virus intercepted messages

2007-12-19 Thread G.W. Haywood
Hi there, On Wed, 19 Dec 2007 Markus Gonaus wrote: I am using clamav-milter with sendmail. The only thing that annoyes me is, I am drowning in virus intercepted messages. They are sent to postmaster as well as to the recipient adresses. I want to stop both. but nothing foung in the docu

Re: [Clamav-users] How to find infected file

2007-12-24 Thread G.W. Haywood
Hi there, On Mon, 24 Dec 2007 Baz wrote: I installed ClamAV and ran a scan on my entire system returning a report of one infected file. How do I find this file? I Did you accidentally press 'send' too soon? I'm sure you intended to tell us just what your system is and how you installed

Re: [Clamav-users] Email viruses almost non-existent?

2007-12-25 Thread G.W. Haywood
Hi there, On Tue, 25 Dec 2007 Paul Kosinski wrote: In December 2006, we were running ClamAV 0.88.7, and there were still a fair number of real viruses being detected in inbound email. Now running 0.91.2 and 0.92, there seem to be only phishing attempts, and not even very many of them. In

Re: [Clamav-users] Email viruses almost non-existent?

2007-12-28 Thread G.W. Haywood
Hi there, On Fri, 28 Dec 2007 Brian Read wrote: I use a number of smeservers (aka e-smith), which all use clamav to scan incoming emails. Up to (and including) version 6 I got plenty of hits from clamav. As I upgraded to version 7, the clamav hits subsided to only phishing emails being

Re: [Clamav-users] clamav gcc dependendencies ...

2008-01-11 Thread G.W. Haywood
Hi there, On Fri, 11 Jan 2008 James Brown wrote: On Intel machine, changing compiler to gcc 3.3 did not work (it does on my PowerPC machine). Switched back to 4.0 and ran: ./configure --enable-experimental CFLAGS=-O0 It compiled perfectly. So thanks Frank and Trk Edwin. FWIW I've

Re: [Clamav-users] SelfCheck of clamd does not work!

2008-01-12 Thread G.W. Haywood
Hi there, On Sat, 12 Jan 2008 Matthias Hank wrote: Why is my clamd not checking his Database every 300 secs, although he is configured to do so and tells me in his logfile, that he will do it? Look at the output of clamconf -n to see if it's looking at the right database directory? -- 73,

Re: [Clamav-users] SelfCheck of clamd does not work!

2008-01-14 Thread G.W. Haywood
Hi there, On Mon, 14 Jan 2008 Matthias Hank wrote: On Sat, Jan 12, 2008 at 07:26:45PM +, G.W. Haywood wrote: On Sat, 12 Jan 2008 Matthias Hank wrote: Why is my clamd not checking his Database every 300 secs, although he is configured to do so and tells me in his logfile, that he

Re: [Clamav-users] SelfCheck of clamd does not work!

2008-01-15 Thread G.W. Haywood
Hi there, On Tue, 15 Jan 2008 Andrew McGlashan wrote: G.W. Haywood wrote: If you type clamconf | tail I don't know about your output from clamconf, but mine is a grand total of 107 lines (courtesy of wc -l). What's the point of using tail in this case... To see just the last ten lines

Re: [Clamav-users] What's this? I can't believe it!

2008-01-20 Thread G.W. Haywood
Hi there, On Sun, 20 Jan 2008 umarzuki mochlis wrote: [EMAIL PROTECTED]:~$ sudo clamscan /media/UM4R [sudo] password for umarzuki: /media/UM4R/g2p3s.exe: OK /media/UM4R/t.exe: OK /media/UM4R/smw-1.7-setup.exe: OK /media/UM4R/autorun.inf: OK I believe g2p3s.exe, t.exe and autorun.inf are

Re: [Clamav-users] What's this? I can't believe it!

2008-01-23 Thread G.W. Haywood
Hi there, On Wed, 23 Jan 2008 David F. Skoll wrote: Are there any similar programmes in Linux? Sure. od. less. vim. emacs. Take your pick. Linux is not subject to the brain-deadedness of Windoze and to a lesser extend MacOS. You didn't forget, I know, but you didn't mention my

Re: [Clamav-users] help, can't compile clamav-0.92 (gcc bug)

2008-01-27 Thread G.W. Haywood
Hi there, On Sun, 27 Jan 2008 Matthias Schmidt wrote: Do I need to install gcc 4.2.2? Can that just be downloaded and installed? On most systems you can download and compile gcc from source. You would probably use an older gcc to compile it but it might work with other compilers. It takes

Re: [Clamav-users] Reference found where even-sized list expected at /usr/lib/perl5/site_perl/5.8.8/File/Scan/ClamAV.pm line 119

2008-02-19 Thread G.W. Haywood
Hi there, On Tue, 19 Feb 2008 Sebastian Hoffmann wrote: Yesterday I started to install ClamAV-milter on our local mail server running Suse 10.1, perl 5.8.8, cpan 1.9205 and Sendmail with spamassassin-milter. All seems to work fine, but since installing the File::Scan::ClamAV module I get

Re: [Clamav-users] quarantine on specific from address

2008-02-20 Thread G.W. Haywood
Hi there, On Wed, 20 Feb 2008 Gomes, Rich wrote: This is really cool, but it got me thinking... Can this trigger on certain events in the maillog? Say: 'User address required' or 'invalid host name' Those are errors I am constintly chasing on this box (like I said its an internal

Re: [Clamav-users] Why load virus database and scan cost so much processor ability?

2008-02-23 Thread G.W. Haywood
Hi there, On Sat, 23 Feb 2008 Dennis Peterson wrote: David Liang wrote: Do you mean there are multiple virus databases on my server? For the clamav was installed by other people, so I didn't notice it. Is it OK to delete other virus database just leave daily.inc and main.inc? Yes -

Re: [Clamav-users] Problem installing clamav 0.92.1

2008-02-28 Thread G.W. Haywood
Hi there, On Thu, 28 Feb 2008 SINDELAR Stefan wrote: Has anyone an idea to get rid of the configure-Warning message? Check the List archives - fairly recent. -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] freshclam logfile size

2008-03-14 Thread G.W. Haywood
Hi there, On Fri, 14 Mar 2008 Per Jessen wrote: Am I the first person to suggest the default max logsize should be 0 instead of 1M (or some other arbitrary value) ? I don't think so. I think most of use syslog (or my preference, syslog-ng) so the issue doesn't really arise. -- 73, Ged.

Re: [Clamav-users] questing about clamav use

2008-03-14 Thread G.W. Haywood
Hi there, On Fri, 14 Mar 2008 Emilio Campos wrote: I am using clamav 0.92 for scan mail from smtp servers, I would like configure clamav with policies, for example, when a attachment with .zip extension in a file mail is scaned by clamav and clamav say that is virus i would like delete

Re: [Clamav-users] General Discussion on malware, spam, and (thanks for all the) phish ; WAS Re: Memory usage for clamd is huge

2008-04-01 Thread G.W. Haywood
Hi there, Short subject lines are acceptable. :) On Tue, 1 Apr 2008 Randal Hicks wrote: Would anyone else care to share their statistics or how they are protecting themselves (and thereby others)? Not just mail, but other vectors as well. Maybe an experience you had where you learned a

[Clamav-users] Re. Non-Windoze Viruses

2008-04-02 Thread G.W. Haywood
Hi there, On Wed, 2 Apr 2008 sydz@ wrote: ... the developer of ClamXav admitted that he doesn't know how to write and add anti-virus definitions for ClamAV's database (which is what is used by ClamXav). And the ClamAV folks are not members of the alliance that the commercial Mac anti-virus

Re: [Clamav-users] problem of scanning binary file

2008-04-03 Thread G.W. Haywood
Hi there, On Thu, 3 Apr 2008 xue wen wrote: I am trying to test the funcationality of ClamAV scanning the binary file. I have added a signature into the daily.db file, the signature is as follows: Worm.Yawen (Clam)=6161616262626363 It is actually the string of aaabbbcc. When I add this

Re: [Clamav-users] all my ClamAV daemons died last night

2008-04-08 Thread G.W. Haywood
Hi there, On Tue, 8 Apr 2008 Christopher X. Candreva wrote: The same problem seems to have just happened again. For the past few hours my jobs has been returning errors . Before I post the details I'll put the question here -- is anyone else seeing mirror issues or should I be looking for a

Re: [Clamav-users] Many Javascript false - positives

2008-04-12 Thread G.W. Haywood
Hi there, On Sat, 12 Apr 2008 Dennis Peterson wrote: [snip] leaves us with no means to evaluate the message further if ClamAV is to be a go no-go tool. A work-around is to not use ClamAV as a go no-go tool and evaluate every message further regardless of the presence of a virus. I'd prefer

Re: [Clamav-users] Can clamav-milter quarantine ALL messages?

2008-04-21 Thread G.W. Haywood
Hi there, On Mon, 21 Apr 2008 Michael Isaev wrote: Gomes, Rich wrote: can quarantine reason here be anything or is there specific sytntax needed? Yes, reason can be anything. To check sendmail if supported quarantine feature: # grep QUARANTINE /etc/mail/sendmail.cf Sendmail

Re: [Clamav-users] clamav-milter --postmaster-only

2008-05-01 Thread G.W. Haywood
Hi there, On Thu, 1 May 2008 TBSC maintenance account wrote: Using the --postmaster-only option for the milter does send a notice to the postmaster but also sends a notice to the email recipient which the documentation says it should not do. Has anyone else experienced this behavior? Yes.

Re: [Clamav-users] clamav-users Digest, Vol 44, Issue 3

2008-05-04 Thread G.W. Haywood
Hi guys, On Sat, 3 May 2008 [EMAIL PROTECTED] wrote: [snip 66kB of message, including 60kB of useless crap] Please guys, trim your posts properly. Some of us are busy. 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit

Re: [Clamav-users] Mirrors policy - whom to contact?

2008-05-14 Thread G.W. Haywood
Hi there, On Wed, 14 May 2008 Konstantin Boyandin wrote: Could someone please advise me whom to contact, from ClamAV dev.team, to receive comments about mirrors policy? Have you tried searching the mailing list archives for mention of mirrors? My previous question to this list was ignored.

Re: [Clamav-users] 0.93.1 RC1

2008-05-23 Thread G.W. Haywood
Hi there, On Thu, 22 May 2008 Nigel Horne wrote: 0.93.1 RC1 Cut-n-pasted from http://www.clamav.net/download/sources five minutes ago: Development releases The ChangeLog lists all the recents fixes and improvements. Latest release candidate: n/a I'd be glad to give it a spin if I knew where

Re: [Clamav-users] 0.93.1 RC1

2008-05-24 Thread G.W. Haywood
Hi there, Guys, I do understand that pressure at work can cause reactions that might be considered disproportionate so I'm not taking any issues with anyone here. I'd just like to say that I'm very happy with ClamAV. I'd like to applaud the ClamAV development team on the fine work that they've

Re: [Clamav-users] 0.93.1RC1

2008-05-29 Thread G.W. Haywood
Hi there, On Thu, 29 May 2008 Nigel Horne wrote: 0.93.1 http://downloads.sourceforge.net/clamav/clamav-0.93.1rc1.tar.gz is a maintenance release ... We welcome any feedback ... wget http://downloads.sourceforge.net/clamav/clamav-0.93.1rc1.tar.gz tar xzvf clamav-0.93.1rc1.tar.gz cd

Re: [Clamav-users] Mega-D

2008-06-15 Thread G.W. Haywood
Hi there, On Sun, 15 Jun 2008 ClamAV List wrote: Has ClamAV detecting Mega-D? It seems that people also call it 'Ozdok' and ClamAV calls it 'Trojan.Agent-25490'. Symantec appears to think the threat level is low, do you think otherwise? -- 73, Ged.

Re: [Clamav-users] *.cvd killed clamd

2008-06-17 Thread G.W. Haywood
Hi there, On Tue, 17 Jun 2008 Obantec Support wrote: Re: *.cvd killed clamd last night after a day running 0.93.1 with lots of virus trapped clamd died and as i use clamav-milter sendmail stopped allowing users to send emails. [snip] the broken file was *.cvd (0 bytes) , once removed i

Re: [Clamav-users] Clamav know virus count reduced.

2008-06-30 Thread G.W. Haywood
Hi there, On Mon, 30 Jun 2008 Tomasz Kojm wrote: When we update the main database and move sigs from daily.cvd into it at some point both main.cvd and daily.cvd include the same (duplicated) subset of signatures. The counter drops down with a new release of daily.cvd That's ugly. While

Re: [Clamav-users] Clamav know virus count reduced.

2008-07-01 Thread G.W. Haywood
Hi there, On Tue, 1 Jul 2008 Tomasz Kojm wrote: G.W. Haywood [EMAIL PROTECTED] wrote: ... is there any reason not to use something like atomic-rsync instead of (or at least as an alternative to) all this messing about with HTTP? The atomic-rsync would have to be used instead

Re: [Clamav-users] Clamav know virus count reduced.

2008-07-02 Thread G.W. Haywood
Hi there, G.W. Haywood [EMAIL PROTECTED] wrote: ... is there any reason not to use something like atomic-rsync instead of (or at least as an alternative to) all this messing about with HTTP? The atomic-rsync would have to be used instead of freshclam on all 2M+ clients

Re: [Clamav-users] 0.9.33 and Snapshot clamdscan hang on Openbsd

2008-07-09 Thread G.W. Haywood
Hi there, On Wed, 9 Jul 2008 Tomasz Kojm wrote: Please have a look at the comment #12 on the bug page Where on Earth is the bug page? -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] 0.93.3 memory doubling problem

2008-07-12 Thread G.W. Haywood
Hi there, On Fri, 11 Jul 2008 09:48:01 Russell Jones wrote: ... 0.93.3 on CentOS 5.2 64bit seems to have a memory doubling issue whenever the database is reloaded. On starting clamd, the ram usage is 70MB. But whenever it reloads ... .. the memory usage jumps to 131 megs and stays there.

Re: [Clamav-users] 0.93.3 memory doubling problem

2008-07-13 Thread G.W. Haywood
Hi there, On Sun, 13 Jul 2008 Stephen Gran wrote: On Sat, Jul 12, 2008 at 07:40:02PM +0100, G.W. Haywood said: Here's a graph of the memory used by clamd on one of my servers: http://www.jubileegroup.co.uk/JOS/misc/clamav-milter-0.9x.gif I don't have logs that go back that far close

Re: [Clamav-users] 0.93.3 memory doubling problem

2008-07-14 Thread G.W. Haywood
Hi Stephen, On Sun, 13 Jul 2008 Stephen Gran wrote: On Sat, Jul 12, 2008 at 07:40:02PM +0100, G.W. Haywood said: Here's a graph of the memory used by clamd on one of my servers: http://www.jubileegroup.co.uk/JOS/misc/clamav-milter-0.9x.gif can you also plot the number of signatures

Re: [Clamav-users] clamav-users Digest, Vol 46, Issue 15

2008-07-15 Thread G.W. Haywood
Hi Stephen, On Tue, 15 Jul 2008 Stephen Gran wrote: On Mon, Jul 14, 2008 at 12:31:06PM +0100, G.W. Haywood said: Here's a graph of the memory used by clamd on one of my servers: http://www.jubileegroup.co.uk/JOS/misc/clamav-milter-0.9x.gif can you also plot the number

[Clamav-users] Local version: 0.92.1 Recommended version: 0.93.3

2008-07-23 Thread G.W. Haywood
Hi there, On Wed, 23 Jul 2008 Benny Pedersen wrote: On Tue, July 22, 2008 17:17, Craig Allison wrote: I didn't realise that it wasn't done in one sweep! apt-get install clamav-freshclam Worked great - cheers! ask debian maintainers to make clamav a meta package of clamav-main

Re: [Clamav-users] simplest replacement for ancient amavis-perl

2008-08-08 Thread G.W. Haywood
Hi there, On Fri, 8 Aug 2008 jef moskot wrote: Re: simplest replacement for ancient amavis-perl Currently, we accept all infected mail, and quietly quarantine it. May I suggest that you quarantine it, BUT STILL REJECT IT after it has been read (and recorded) in its entirety? You're making a

Re: [Clamav-users] simplest replacement for ancient amavis-perl

2008-08-09 Thread G.W. Haywood
Hi all, On Sat, 9 Aug 2008 [EMAIL PROTECTED] wrote: all kinds of different takes on it :) FWIW, as you know by now I'm in the 'let them know there's a problem' camp. But, well, it was just a suggestion. It was interesting so see the response to my post, obviously there are some strong

Re: [Clamav-users] simplest replacement for ancient amavis-perl

2008-08-11 Thread G.W. Haywood
Hi there, On Mon, 11 Aug 2008 Ian Eiloart wrote: RFC2821 defines the behaviour of an MTA, and anything that breaks the standard can't expect to deliver email. That's our policy here. Hehe, I bet you'd change that policy pretty sharpish if the people sending the emails wanted to give you

Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-18 Thread G.W. Haywood
Hi there, On Mon, 18 Aug 2008, Luca Gibelli wrote: ... release candidate for 0.94. I started to download it, but when I saw that it was going to be just under 20 megabytes I cancelled it. -- 73, Ged. ___ Help us build a comprehensive ClamAV guide:

Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-19 Thread G.W. Haywood
Hi there, On Tue, 19 Aug 2008 Brian Morrison wrote: On Mon, 18 Aug 2008 10:59:29 +0100 G.W. Haywood wrote: On Mon, 18 Aug 2008, Luca Gibelli wrote: ... release candidate for 0.94. I started to download it, but when I saw that it was going to be just under 20 megabytes I cancelled

Re: [Clamav-users] announcing ClamAV 0.94rc1

2008-08-20 Thread G.W. Haywood
Hi there, On Wed, 20 Aug 2008 Dennis Peterson wrote: G.W. Haywood wrote: My point was that it's ten times as big as it should be Which begs the question: How big should it be [EMAIL PROTECTED] mail]$ tar czv clamav-0.93.3/database/ database.tgz [EMAIL PROTECTED] mail]$ tar czv clamav

Re: [Clamav-users] [EMAIL PROTECTED]: Question about dual processorMandriva. Please kindly help.

2008-09-01 Thread G.W. Haywood
Hi there, On Mon, 1 Sep 2008 Ken LEpee wrote: i'm Ken and i'm new to linux, also the free software world... Welcome. :) I read once that many anti viruses which are meant for linux based os don't work in computers using dual processor That is nonsense. I have been using dual processor

Re: [Clamav-users] Stop it!

2008-10-04 Thread G.W. Haywood
Hi there, On Sat, 4 Oct 2008 John Rudd wrote: ...what they REALLY ought to do is supply a tool which reads old config files, and does something like a lint check. I believe there was a similar tool published by a user a while ago. Why not put this in bugzilla as suggested by Tomasz? (I

Re: [Clamav-users] Security Risk?

2008-10-12 Thread G.W. Haywood
Hi there, On Sun, 12 Oct 2008 Some One wrote: ... echo SHUTDOWN | nc localhost 3310 would kill the daemon. I was not root at the time of sending the command and the daemon still quits. Isn't this bad? Check the permissions on the socket? -- 73, Ged.

Re: [Clamav-users] False Positive W97M.Static

2008-10-29 Thread G.W. Haywood
Hi there, On Wed, 29 Oct 2008 David Shrimpton wrote: Surely this signature is incorrect . Is there a way of disabling it ? See section 2.5 of http://www.clamav.net/doc/latest/signatures.pdf -- 73, Ged. ___ Help us build a comprehensive ClamAV

Re: [Clamav-users] clamav-milter installation question

2008-11-08 Thread G.W. Haywood
Hi there, On Sat, 8 Nov 2008 Allen, Geoff wrote: Hongwei Li wrote: One question: I could not find config file for clamav-milter. [snip] Should there be a config file for clamav-milter? If yes, where is it? If no, how to configure it? As a new user of ClamAV, this also confused me!

Re: [Clamav-users] Non-Windows Malware

2008-12-06 Thread G.W. Haywood
Hi there, On Fri, 5 Dec 2008 a self-confessed ClamAV Newbie wrote: I has been remarkably hard to find what malware are in Clamav's Definitions List. This is an Open Source project. Have you considered sending a patch for the documentation? http://www.clamav.net/doc/latest/ At last having

Re: [Clamav-users] slow scan, high CPU usage with clamdscan

2009-01-15 Thread G.W. Haywood
Hi there, On Thu, 15 Jan 2009 Tomasz Chmielewski wrote: I'm trying to scan a 120 kB file [snip] Are you sure about that? Data scanned: 62.26 MB -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] No clmilter.sock (again0

2009-01-16 Thread G.W. Haywood
Hi there, On Fri, 16 Jan 2009 Rem P Roberti wrote: I'm back to square one here. I don't recall seeing your earlier posts about this, perhaps you can give us a pointer to the thread(s)? I have installed clamav with milter, and have all of the appropriate entries and flags in my rc.conf I

Re: [Clamav-users] Australian Bush Fires

2009-02-08 Thread G.W. Haywood
Hi guys, On Sun, 8 Feb 2009 Bill Maidment wrote: [religious claptrap snipped] Please take the religion somewhere else, this is the 21st century. -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] what about sanesecurity phising database

2009-02-11 Thread G.W. Haywood
Hi there, On Wed, 11 Feb 2009 Luis Miguel R. wrote: Anyone knows when sanesecurity phishing databases will be online? Did you not check the list archives before asking your question? [extract] Date: Thu, 05 Feb 2009 12:40:50 + From: Steve Basford steveb_cla...@sanesecurity.com Subject:

Re: [Clamav-users] squid + clamd performance pointers anyone

2009-02-12 Thread G.W. Haywood
Hi there, On Thu, 12 Feb 2009 Jason Haar wrote: I was just concerned that this thread of conversation was not about ClamAV and we were beginning to annoy other people :-) This thread is not annoying me. On the contrary, I find it very interesting. :) -- 73, Ged.

Re: [Clamav-users] Your ClamAV installation is OUTDATED

2009-02-14 Thread G.W. Haywood
Hi there, On Sat, 14 Feb 2009 chen wrote: I Upgraded but still receive Your ClamAV installation is OUTDATED Did you stop and restart the daemons? -- 73, Ged. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] 0.95RC1 availability

2009-02-28 Thread G.W. Haywood
Hi there, On Sat, 28 Feb 2009 Nigel Horne wrote: 0.95 RC1 was published on Wednesday 25/2/09. Compiled OK on three platforms. Didn't install it on any of them - production machines - but clamdtop complains as expected when run on all of them. :) i686 (dual Pentium III) / RedHat 9 much

Re: [Clamav-users] Script Update Name Change Announcement

2009-04-24 Thread G.W. Haywood
Hi Bill, On Fri, 24 Apr 2009 clamav-users-requ...@lists.clamav.net wrote: I have been asked by some package and port maintainers to rename the script and tarball to better support their efforts to package the script Makes a lot of sense. As usual, let me know if there are any issues,

Re: [Clamav-users] Suggestion - make the source package available without the main.cvd database

2009-06-18 Thread G.W. Haywood
Hi there, On Thu, 18 Jun 2009 Per Jessen wrote: Any chance of making the source package available without the current cvd databases? The current package is 24Mb, without the CVD it's only 3Mb. http://lurker.clamav.net/message/20080819.125137.0b9d9f57.en.html -- 73, Ged.

Re: [Clamav-users] question about Clamav anti virus for old mac OS 9.2

2009-06-23 Thread G.W. Haywood
Hi there, On Tue, 23 Jun 2009 off...@jimrailton.com wrote: The virus is : OF97/Tristate-C I'm afraid we geeks haven't been particularly helpful so far, so I think taking a couple of steps back and looking at the bigger picture might help you. First, ClamAV isn't your typical anti-virus

Re: [Clamav-users] Malformed DB

2009-07-04 Thread G.W. Haywood
Hi there, On Sat, 4 Jul 2009 T?r?k Edwin wrote: On 2009-07-03 16:36, Aecio F. Neto wrote: clamd should try to load the db, if malformed current one should be kept instead of crashing. no? Current one may be already freed. Er, huh? -- 73, Ged.

Re: [Clamav-users] Script updated: clamav-unofficial-sigs.sh (v3.6)

2009-08-24 Thread G.W. Haywood
Hi Bill, On Mon, 24 Aug 2009 Bill Landry wrote: Re: Script updated: clamav-unofficial-sigs.sh (v3.6) It's been awhile, but I finally found some time to work on an update to the clamav-unofficial-sigs script. [snip] Thanks once again for your efforts Bill (and of course thanks to the ClamAV

[Clamav-users] nonblock_connect: connect timing out (30 secs)

2009-09-27 Thread G.W. Haywood
Hi there, On Sun, 27 Sep 2009 Agostinho Carvalho wrote: New Clam user here, so please be gentile :-) Er, gentle. I'll try. :) WARNING: Clamd was NOT notified: Can't connect to clamd through /var/lib/clamav/clamd-socket connect(): No such file or directory The 'clamd' daemon can listen

Re: [Clamav-users] Some Virus not detected by Clamav

2009-10-13 Thread G.W. Haywood
Hi there, On Tue, 13 Oct 2009 Jose-Marcio Martins da Cruz wrote: I have 49 virus (2 kinds only) ... weren't detected by ClamAV ... surely variants of virus already detected by Clamav. ... As long as this happens near every day since a week ago, it's becoming annoying. Check the

Re: [Clamav-users] [Fwd: [sanesecurity] x86_64 users: possible malformed database problems]

2009-11-02 Thread G.W. Haywood
Hi there, On Thu, 29 Oct 2009 aCaB wrote: On our side we do a lot of QA ... I really believe something needs to happen here so that these type of bugs can be caught quickly before they affect a number of users. Thoughts? I suspect that rather than QA, what you do is just a lot of

Re: [Clamav-users] [Fwd: [sanesecurity] x86_64 users: possible malformed database problems]

2009-11-04 Thread G.W. Haywood
Hello again, On Wed, 4 Nov 2009 aCaB wrote: G.W. Haywood wrote: I suspect that rather than QA, what you do is just a lot of hap-hazard testing. My mail was about custom databases provided by 3rd parties, not about ClamAV release cycles. Besides, you miss another point: ClamAV

Re: [Clamav-users] [Fwd: [sanesecurity] x86_64 users: possible malformed database problems]

2009-11-07 Thread G.W. Haywood
Hi there, On Fri, 6 Nov 2009 Nathan Gibbs wrote: Cut these guys some slack. They can't do everything. This isn't about cutting slack, or for that matter pointing fingers. It's about contributing. I'm contributing. Sometimes people don't want to hear what needs to be said. That can be

Re: [Clamav-users] Quarantine issue with new 0.95.x clamav-milter

2009-11-10 Thread G.W. Haywood
Hi there, On Tue, 10 Nov 2009 Mark Costlow wrote: Prior to 0.95, I had my clamav-milter configured to quarantine messages and reject them. So the sender got a 550 SMTP response, and we got a copy of the payload they were trying to send. In 0.95.3, I have the choice to tell the milter to

  1   2   3   4   5   6   7   8   9   10   >